Cloud Security Engineer

Overview

In this hands-on Cloud Security Engineer role, you design, build and secure AWS-based cloud architectures for financial services and public sector clients. You’ll embed with engineering and platform teams to shift security left across delivery, integrating security into pipelines and reinforcing cloud resilience. The role blends practical engineering with security, focusing on modern cloud tooling and threat prevention to drive secure, scalable deployments.

Responsibilities

• Design and implement cloud security architectures on AWS (primary) with exposure to Azure/GCP
• Build and maintain secure infrastructure using Infrastructure as Code (Terraform) with reusable modules
• Integrate security tooling and automated controls into CI/CD pipelines (SAST/DAST, secrets scanning, policy-as-code)
• Conduct threat modelling, cloud security posture reviews, and risk assessments for cloud platforms/workloads
• Contribute security requirements to sprint cycles and platform roadmaps in scaled agile teams
• Provide technical security assurance for deployments, third-party integrations, and SaaS onboarding
• Support incident response planning and contribute to cloud resilience and recovery design
• Communicate security risks and remediation priorities to peers and leads

Key requirements

• Bachelor in Cyber Security, Computer Science, Software Engineering, or related technical discipline
• Hands-on experience engineering and securing workloads on AWS
• Practical experience with Terraform and IaC-based delivery
• Background in DevSecOps, secure software engineering, or application security with CI/CD integration
• Exposure to cloud security posture management and cloud-native security tooling
• Familiarity with TCP/IP, DNS, VPN, IPSEC
• Experience in agile delivery (Scrum, SAFe) or similar

• Clear communication of security risks to technical peers
• Cross-functional collaboration in agile teams
• Ability to translate security into actionable guidance
• AWS cloud security engineering
• Terraform and IaC
• SAST/DAST tooling integration

…